New way to check clients?

[Jizzyz]

I honestly think we need someone to decompile the clients and check them, for pass stealers.Just scanning the jar does nothing cuz u cant detect viruses in the code.

[non ame]

^This
+ check for hidden .exes

[hexacyanide]

It's not possible to hide an exe in a jarfile.

[non ame]

Actually it is.

[PatanNoman]

Actually it is.

PLZ ELABORATE

[non ame]

This was posted on hf a month ago, but i don't want to give more details.

[hexacyanide]

If you put it in the jarfile, it's not an exe.

[rabir007]

I honestly think we need someone to decompile the clients and check them, for pass stealers.Just scanning the jar does nothing cuz u cant detect viruses in the code.

Well, i checked the minecraft, and i detected:
the minecraft.jar dont give the password of your account, it only give the name.....
So you should edit the Launcher, to steal passwords....

[non ame]

The client can steal your last login file and thus also the password.

[[MPGH]Psychotic]

The client can steal your last login file and thus also the password.

That's not a .exe, is it? No. If it was physically possible to put an application into a JAR file - it wouldn't be a JAR file.

Also, if you decompile a JAR the best way to find a last login stealer - you look for any HTTP connections, etc.

[non ame]

I referred to the guy above.
Yes it is possible to hide an .exe in a .jar

[[MPGH]Psychotic]

So, you're saying if you ran the jar, you'd also be running the application within it? I'm not a Java programmer, so I wouldn't know. I learn something new every day, though. I code Borland Delphi 7, Python, and some other minor languages (web developing, etc).

[non ame]

Unfortunately this is possible :S
Thats why I do only trust Nodus (+ paid clients)

[iPacket]

Silly idiots be silly.
And yes of course its possable. and you cant "scan" and find them either.

[Mr_Anon]

As a matter of fact, you CAN scan to find them....the makers of Strain client recently came out with the Last Login checker.

https://strainclien*****m/tools.php?act=lldetect

It basically looks for any Http connections or any instances of lastlogin in the code.